Software Engineer

Required Skills & Experience

• Strong Python or Java development experience o Experience building, enhancing, and maintaining enterprise applications
• AWS and/or Azure experience/knowledge
• CI/CD / DevSecOps experience
• Experience with vulnerability management/security controls such as SAST, DAST, or SCA
• Strong understanding of APIs / integrations
• Experience supporting applications post-production, including maintenance, enhancements, debugging, and troubleshooting

Nice to Have Skills & Experience

• Terraform / CloudFormation
• Docker / Kubernetes
• Cloud security / cloud governance experience
• NIST or other security/control frameworks
• Risk, observability, policy-as-code, EOL, or vulnerability tooling
• SQL / relational databases
• Experience within banking or another highly regulated environment
• AI/ML / agent-first development

Job Description

This engineer will be focused on the development, maintenance, and enhancement of Bank of America’s Risk & Observability Engine (ROE). The application supports cloud governance and helps evaluate cloud use cases, security controls, policies, vulnerabilities, EOL, and other risk requirements across AWS/Azure environments. The engineer will be more focused on application development than owning cloud infrastructure. They’ll primarily develop using Python, build/enhance functionality within the application, integrate security and cloud controls, troubleshoot issues, and support the application once functionality is released. They’ll work closely with cloud governance/security teams to help automate and publish risk/control outcomes for bank-managed and non-bank-managed cloud use cases.